Encrypted USB stick glitch led to Council data loss

A council that used encrypted memory sticks has been handed a reprimand from the Information Commissioner's Office (ICO) after an employee's struggle to use the technology resulted in data being lost on an unsecured replacement drive.

According to a release put out by the ICO, Cambridgeshire County Council lost a stick containing case and meeting notes relating to least six 'vulnerable adults' in the council's care, which it reported to the organisation last November.

The highly unusual dimension to this case is that the non-encrypted memory stick had only been used after an employee "encountered problems" using the encrypted one handed out by the Council.

The nature of the problem has not been revealed but underlines the problems organisations can encounter when using potentially complex technologies such as encryption.

If passwords are forgotten, procedures need to be in place to receive a new one quickly. If the drive fails for a technical reason, staff need to have a convenient fallback that doesn't involve simply using an unsecured replacement.

"While Cambridgeshire County Council clearly recognise the importance of encrypting devices in order to keep personal data secure, this case shows that organisations need to check their data protection policies are continually followed and fully understood by staff," said the ICO's enforcement group manager, Sally Anne-Poole.

In fact the council had undertaken an internal campaign to promote the use of encryption shortly before the loss.

The Council has escaped more serious action by signing up to a public undertaking to improve procedures although it is not clear how this differs from those in place at the time of the drive's loss.

The case will probably be glossed over by companies that sell products in this field but admins will be well aware of the underlying issues. Encryption can secure data but it can be a complex and time-consuming technology to manage in real-world situations.

The HP OfficeJet 250 Mobile Printer is a great device that fits perfectly into my fast paced and mobile lifestyle. My first impression of the printer itself was how incredibly compact and sleek the device was.

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Reproduction in whole or in part in any form or medium without express written permission of IDG Communications is prohibited. Copyright 2013 IDG Communications.
ABN 14 001 592 650. All rights reserved.

Contact Us

With over 25 years of brand awareness and credibility, Good Gear Guide (formerly PC World Australia), consistently delivers editorial excellence through award-winning content and trusted product reviews.